Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2022-05-03 CVE-2022-20745 Improper Input Validation vulnerability in Cisco Firepower Threat Defense
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
7.5
2022-05-01 CVE-2022-21144 Improper Input Validation vulnerability in Libxmljs Project Libxmljs
This affects all versions of package libxmljs.
network
low complexity
libxmljs-project CWE-20
7.5
2022-04-28 CVE-2021-41945 Improper Input Validation vulnerability in Encode Httpx
Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.
network
low complexity
encode CWE-20
critical
9.1
2022-04-26 CVE-2022-24881 Improper Input Validation vulnerability in Ballcat Codegen
Ballcat Codegen provides the function of online editing code to generate templates.
network
low complexity
ballcat CWE-20
critical
9.8
2022-04-26 CVE-2022-29499 Improper Input Validation vulnerability in Mitel Mivoice Connect
The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation.
network
low complexity
mitel CWE-20
critical
9.8
2022-04-22 CVE-2021-3970 Improper Input Validation vulnerability in Lenovo products
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
local
low complexity
lenovo CWE-20
6.7
2022-04-22 CVE-2021-4211 Improper Input Validation vulnerability in Lenovo products
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
local
low complexity
lenovo CWE-20
6.7
2022-04-22 CVE-2021-4212 Improper Input Validation vulnerability in Lenovo products
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
local
low complexity
lenovo CWE-20
6.7
2022-04-21 CVE-2022-24423 Improper Input Validation vulnerability in Dell Integrated Dell Remote Access Controller 8 Firmware 2.82.82.82
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability.
network
low complexity
dell CWE-20
7.5
2022-04-21 CVE-2022-20783 Improper Input Validation vulnerability in Cisco Roomos and Telepresence Collaboration Endpoint
A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
7.5